Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: BOiwzHR36DxTB1gURmeWiTs5sZz1hbcPVoq7ytvhgj4=
Subject key identifier: F6:D3:A3:EA:F7:A0:18:0B:DC:F1:8C:91:7C:8C:44:EB:22:86:F4:B3
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019D27E04245584D772889EA457B983F6EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0A72
Signing time: Thu 26 Mar 2026 02:01:41 +0000
Manifest this update: Thu 26 Mar 2026 02:01:41 +0000
Manifest next update: Fri 27 Mar 2026 02:01:41 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: Bty0EGtscnm6X/UV9OfHaI7biB0rvD0+GtzxUxKgTk8=)
2: Z15aMKSwaav6tVruPDM8dqX-OrU.roa (hash: T5sFynuOqb9ftXUvpV0JfIR7RY1qYAplZnnlFh9SU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:42:45:58:4d:77:28:89:ea:45:7b:98:3f:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Mar 26 02:01:41 2026 GMT
Not After : Mar 27 02:01:41 2026 GMT
Subject: CN=f6d3a3eaf7a0180bdcf18c917c8c44eb2286f4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:e3:a9:20:2f:47:83:87:1d:7d:c3:d5:3e:
b1:16:e6:6d:78:39:f3:4a:63:a0:33:60:ca:b4:6e:
56:a7:e5:55:11:eb:aa:4e:2c:92:b6:34:6c:da:30:
25:2f:5c:64:37:7e:3d:8e:86:17:45:65:d5:a2:76:
f0:55:35:74:d4:ac:fb:c6:4a:f5:43:4f:a5:a8:b0:
0f:85:d5:90:b7:a6:5a:7e:8d:00:0c:dd:05:41:42:
d0:94:60:e9:06:dd:be:bc:32:97:45:2f:fc:26:10:
96:a4:39:be:e7:89:f5:83:f0:db:21:15:17:e7:72:
99:15:0f:c3:37:89:ac:9c:99:68:64:cf:d8:16:b6:
4f:72:3c:66:77:59:d1:3c:2b:3f:0c:a5:0a:9f:e3:
5d:18:ee:a5:49:de:c5:c3:d7:f0:ee:76:c0:4c:4e:
68:96:2e:e5:c2:4a:b3:4a:d8:1f:6e:64:34:44:9c:
f1:98:90:ec:44:fd:20:0b:0b:19:a1:bf:67:22:fb:
fe:31:84:75:c3:15:46:d4:ce:a4:61:35:11:5a:f9:
68:01:20:d1:6c:4f:36:5f:de:42:69:c7:65:fc:c5:
9c:b6:e1:8a:dc:0b:0d:0f:e3:f8:dd:e6:fa:2c:42:
1c:46:0a:bf:04:3a:e2:97:8f:2d:d3:dc:90:95:41:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:A3:EA:F7:A0:18:0B:DC:F1:8C:91:7C:8C:44:EB:22:86:F4:B3
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fb:fe:15:ea:30:e0:66:ce:5b:48:e2:34:f2:fa:64:12:5e:
8c:4d:e1:a7:99:21:54:79:72:e7:c5:16:c9:2f:9a:65:4a:12:
f6:9b:f4:ae:b0:26:8c:9a:23:f8:49:76:16:1e:30:32:fd:b2:
9f:b0:89:38:4e:06:c8:82:37:86:25:aa:ae:f8:af:9c:e4:10:
be:9c:b4:a5:f0:db:22:0b:ff:90:e7:a1:87:17:59:da:69:c0:
5d:66:a6:c0:19:22:70:b4:42:2e:15:45:d0:3b:4d:59:89:5e:
72:07:75:6b:93:5c:8b:22:be:a6:dc:44:23:47:fd:09:53:8a:
7b:d1:26:b6:35:7c:e9:79:ff:3b:47:39:bc:a2:7e:22:05:6a:
a7:ea:f9:06:59:1f:5f:a0:3c:bf:15:ce:6b:85:45:0b:2f:db:
16:85:d4:62:1e:c6:ca:bd:8b:74:3b:df:79:7d:21:02:2c:99:
2d:76:e1:8e:b4:0c:54:3d:4a:83:aa:bc:35:ad:31:95:5c:0f:
23:34:a4:31:c6:62:aa:3f:cf:9e:66:af:81:41:ae:b8:0e:92:
18:04:cd:f6:a1:d7:76:97:d2:62:f5:af:8e:f0:69:bc:b8:c0:
ad:46:0c:f3:e1:43:6f:59:e4:c5:90:2b:e7:64:3e:f9:42:a6:
1f:59:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:20 2026 by rpki-client